Alternatives and similar repositories for ETW-Trace

Users that are interested in ETW-Trace are comparing it to the libraries listed below

• addrianyy / asmlib_x64
  x64 assembler library
  ☆31Updated last year
• yjugl / mitimon
  Monitor ETW events for Windows process mitigation policies, with stack traces
  ☆31Updated 2 years ago
• Speedi13 / NsiAllocateAndGetTable-used-from-GetTcpTableInternal
  Undocumented NsiAllocateAndGetTable usage in GetTcpTableInternal reverse engineered on Win7 X64
  ☆20Updated 7 years ago
• dearfuture / oldv-driver
  ☆14Updated 6 years ago
• KernelPanic-OpenSource / Win2K3_NT_sdktools
  Windows Server 2K3 NT 5
  ☆12Updated 4 years ago
• AndrewGaspar / km-stl
  A drop-in replacement for the C++ STL for kernel mode Windows drivers. The goal is to have implementations for things like the standard a…
  ☆31Updated 9 years ago
• KelvinMsft / UsbMon
  ☆36Updated 4 years ago
• kouzhudong / PacketInjection
  Packet Injection With WFP
  ☆14Updated 2 years ago
• amiryeshurun / HyperWin-Communication-Driver
  A driver that supports communication between a Windows guest and HyperWin
  ☆15Updated 4 years ago
• RIscRIpt / ntl
  Very tiny and selective implementation of STL for Windows NT kernel mode drivers
  ☆18Updated 4 years ago
• lldre / handle_exploration
  Figuring out the cause of a handle downgrade
  ☆24Updated 2 years ago
• NewWorldComingSoon / OAC
  Open Anti Cheat
  ☆27Updated 3 years ago
• Vicshann / PEProtectDrv
  Some crazy PE executables protection kernel driver
  ☆19Updated 5 years ago
• adrianyy / memorylib
  Remote memory library in C++17.
  ☆31Updated 7 years ago
• moccajoghurt / MemWars
  ☆46Updated 6 years ago
• zhuhuibeishadiao / UserMemoryOperation64
  Map memory to user space and manipulate user memory, using capmon
  ☆24Updated 6 years ago
• wjcsharp / Common
  Shareds for kernel developement
  ☆28Updated 11 years ago
• moukayz / KernelDriverDemo
  ☆24Updated 6 years ago
• anzelesnik / MySyscall
  Example of hijacking system calls via function pointer tables
  ☆31Updated 4 years ago
• ajkhoury / windbg_to_c
  Translates WinDbg "dt" structure dump to a C structure
  ☆13Updated 5 years ago
• MiroKaku / ConMon
  Windows Console Monitor
  ☆34Updated 6 years ago
• kyREcon / IsKernelDebuggerPresent
  Detects if a Kernel mode debugger is active by reading the value of KUSER_SHARED_DATA.KdDebuggerEnabled. It is a high level and portable …
  ☆23Updated 7 years ago
• prash-wghats / Dtrace-ETW
  DTrace for Windows in userspace; Frontend to ETW
  ☆27Updated 2 years ago
• h4xu3lyn / FuckPg
  Analysing and defeating PatchGuard universally
  ☆35Updated 4 years ago
• biniamf / data_obfuscation
  Data Obfuscation for C/C++ Code Based on Residue Number Coding (RNC)
  ☆20Updated 4 years ago
• luciouskami / shadowMap
  bypass CRC
  ☆11Updated 7 years ago
• fake-cheater / MouHidInputHook
  MouHidInputHook enables users to filter, modify, and inject mouse input data packets into the input data stream of HID USB mouse devices …
  ☆11Updated 6 years ago
• alexvogt91 / NetDriver
  kernel-mode TDI client which can send and receive HTTP requests
  ☆55Updated 7 years ago
• MiroKaku / Learning-Example
  For Example. See Miro's Blog
  ☆30Updated 2 years ago
• GravitLauncher / Avanguard
  fork HoShiMin Avanguard
  ☆21Updated 6 years ago